1. Origin pull request:

!41:fix CVE-2022-2806

2. Original pull request related issue(s):

#I9AR03:CVE-2022-2806

3. Original pull request related commit(s):

Sha Datetime Message
aec4d394 2024-05-06 16:40:45 +0800 CST [ovirt] answer files: Filter out all password keys

Instead of hard-coding specific keys and having to maintain them over
time, replace the values of all keys that have 'password' in their name.
I think this covers all our current and hopefully future keys. It might
add "false positives" - keys that are not passwords but have 'password'
in their name - and I think that's a risk worth taking.

Sadly, the engine admin password prompt's name is
'OVESETUP_CONFIG_ADMIN_SETUP', which does not include 'password', so has
to be listed specifically.

A partial list of keys added since the replaced code was written:
- grafana-related stuff
- keycloak-related stuff
- otopi-style answer files

Signed-off-by: Yedidyah Bar David didi@redhat.com
Change-Id: I416c6e4078e7c3638493eb271d08d73a0c22b5ba